Bafuputsi ba Binarly ba supile letoto la bofokoli ho khoutu ea pase ea litšoantšo e sebelisoang ho firmware ea UEFI ho tsoa ho bahlahisi ba fapaneng. Bofokoli bo lumella motho ho fihlela ts'ebetso ea khoutu nakong ea boot ka ho beha setšoantšo se entsoeng ka ho khetheha karolong ea ESP (EFI System Partition) kapa karolong ea ntlafatso ea firmware e sa saenneng ka mokhoa oa digital. Mokhoa o reriloeng oa tlhaselo o ka sebelisoa ho feta mokhoa oa boot o netefalitsoeng oa UEFI Secure Boot le mekhoa ea ts'ireletso ea Hardware joalo ka Intel Boot Guard, AMD Hardware-Validated Boot le ARM TrustZone Secure Boot.
Bothata bo bakoa ke taba ea hore firmware e u lumella ho bonts'a li-logos tse hlalositsoeng ke mosebedisi mme o sebelisa lilaebrari tsa litšoantšo bakeng sa sena, tse etsoang boemong ba firmware ntle le ho tsosolosa litokelo. Hoa hlokomeloa hore firmware ea sejoale-joale e kenyelletsa khoutu ea ho arola liforomo tsa BMP, GIF, JPEG, PCX le TGA, tse nang le bofokoli bo lebisang ho khaphatseha ha buffer ha ho arola data e fosahetseng.
Bofokoli bo 'nile ba tsejoa ho firmware e fanoang ke bafani ba thepa ba fapaneng (Intel, Acer, Lenovo) le bahlahisi ba firmware (AMI, Insyde, Phoenix). Hobane khoutu ea bothata e teng ka har'a likarolo tsa litšupiso tse fanoeng ke barekisi ba firmware ba ikemetseng mme e sebelisoa e le motheo oa baetsi ba li-hardware tse fapaneng ho aha firmware ea bona, bofokoli ha bo tobane le barekisi mme bo ama tikoloho eohle.
Lintlha tse mabapi le bofokoli bo khethiloeng li tšepisitsoe hore li tla senoloa ka la 6 Tšitoe sebokeng sa Black Hat Europe 2023. Tlhahiso ea kopano e tla boela e bontše ts'ebetso e u lumellang ho phethahatsa khoutu ea hau ka litokelo tsa firmware ho litsamaiso tse nang le x86 le meralo ea ARM. Qalong, bofokoli bo ile ba tsejoa nakong ea tlhahlobo ea firmware ea Lenovo e hahiloeng holim'a sethala sa Insyde, AMI le Phoenix, empa firmware e tsoang ho Intel le Acer le eona e ile ea boleloa e le e ka bang kotsing.
Source: opennet.ru